Move secret_token into ENV